AZL-89466

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-89466.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-89466

Upstream

CVE-2026-3276

Published

2026-06-03T16:16:29Z

Modified

2026-08-30T05:26:50Z

Summary

CVE-2026-3276 affecting package python3 for versions less than 3.12.9-14

Details

unicodedata.normalize() can take excessive CPU time when processing specially crafted Unicode input containing long runs of combining characters with alternating Canonical Combining Class values. This affects all normalization forms.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-3276

Affected packages

Azure Linux:3 / python3

Package

Name: python3
Purl: pkg:rpm/azure-linux/python3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.12.9-14

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-89466.json"